Cyber Security Consultant - Penetration Testing

Bitdefender is a cybersecurity leader delivering threat prevention, detection, and response solutions worldwide. The Cyber Security Consultant - Penetration Testing will lead offensive security engagements, collaborate with clients and internal teams, provide technical expertise and sales support, and mentor team members while delivering high-quality security assessments.

Responsibilities:

• Engagement Management: Lead the planning, execution, and reporting of offensive security engagements, ensuring objectives are met within scope, budget, and timeline constraints
• Technical Expertise: Demonstrate advanced knowledge and proficiency in various offensive security techniques, tools, and methodologies
• Client Interaction: Interface directly with clients to understand their security objectives, communicate findings, and provide actionable recommendations for improvement
• Sales Support: Interface directly with Sales to support on client scoping to understand their security objectives and tailor an impactful and valuable solutions
• Team Development: Mentor and develop team members, supporting their growth and skill enhancement in the field of offensive security
• Continuous Improvement: Stay abreast of emerging threats, vulnerabilities, and industry best practices, integrating new techniques and tools
• Collaboration: Collaborate with other teams within the firm, such as Sales, Delivery Management, and Research, to ensure alignment and maximize client value
• Quality Assurance: Maintain high standards of quality and professionalism in all deliverables across the team, adhering to the firm's methodologies and standards
• Travel: Willing to travel around and within South-east Asia and enjoy being out of their comfort zone

Requirements:

• Fluent in English (other languages are welcome)
• Minimum of 5 years of experience in cybersecurity
• OSCP (Required)
• Bachelor degree is computer science, information security or any related field
• OSCE, OSWE, CREST CRT, CRTP, CCT INF, Cloud security experience
• Proven track record of leading and managing teams, with excellent communication, interpersonal, and conflict resolution skills
• Strong communication, writing and interpersonal skills to collaborate with external and internal stakeholders
• Deep understanding of offensive security principles, techniques (e.g. those in the MITRE ATT&CK), and tools ( such as Cobalt Strike, Burp Suite, Fortify, etc ) with hands-on experience in areas such as penetration testing, exploit development, and social engineering. Good competency in using scripting languages such as, Python, PowerShell, C#, C/C++, Go Lang
• Strong client-facing skills, with the ability to build and maintain relationships, understand client needs, deliver impactful solutions in a clear manner and providing support to pre sales
• Strong analytical and problem-solving skills, with the ability to think creatively and work independently with minimal supervision
• Collaborative mindset, with the ability to work effectively in cross- functional teams and contribute to a positive work environment whilst training and mentoring others in a leadership capacity
• Commitment to ethical hacking principles, with a dedication to upholding client confidentiality and integrity in all engagements
• Ability to thrive in a fast-paced, dynamic environment, with a willingness to adapt to changing priorities and challenges
• Demonstrated passion for cybersecurity, evidenced by involvement in security initiatives outside of work, such as public disclosure of vulnerabilities or relevant awards from bug bounty programs
• Willing to travel around and within South-east Asia and enjoy being out of their comfort zone